12080 matches found
CVE-2020-23909
CVE-2020-23909 describes a heap-based buffer over-read in AdvanceMAME (pngex.cc: function png_convert_4) affecting versions through 2.1. The root cause is improper bounds checking in png_convert_4, leading to potential crashes and, per CNVD/CNNVD entries, possible arbitrary code execution. Exploi...
CVE-2020-23909
Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...
openSUSE 15 Security Update : poppler (SUSE-SU-2023:2838-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2838-1 advisory. - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service bsc1199272. - CVE-2018-21009: Fixed integer...
SUSE-SU-2023:2838-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service bsc1199272. - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc bsc1149635. - CVE-2019-12293: Fixed heap-based buffer...
CVE-2023-3649 Buffer Over-read in Wireshark
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...
CVE-2023-3649 Buffer Over-read in Wireshark
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...
EulerOS 2.0 SP9 : glusterfs (EulerOS-SA-2023-2313)
According to the versions of the glusterfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. CVE-2023-26253 Note that...
Milesight UR32L eventcore access violation vulnerability
Talos Vulnerability Report TALOS-2023-1696 Milesight UR32L eventcore access violation vulnerability July 6, 2023 CVE Number CVE-2023-23571 SUMMARY An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to...
CVE-2023-28542 Buffer Over-read in WLAN HOST
Memory Corruption in WLAN HOST while fetching TX status information...
CVE-2023-28542 Buffer Over-read in WLAN HOST
Memory Corruption in WLAN HOST while fetching TX status information...
CVE-2023-28541 Buffer Over-read in WLAN Host
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...
CVE-2023-28541 Buffer Over-read in WLAN Host
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...
SUSE-SU-2023:2620-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-1255: Fixed input buffer over-read in AES-XTS implementation on 64 bit ARM bsc1210714. - CVE-2023-2650: Fixed possible DoS translating ASN.1 object identifiers bsc1211430...
RHEL 9 : openssl (RHSA-2023:3722)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3722 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
`openssl` `X509VerifyParamRef::set_host` buffer over-read
When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...
GHSA-XCF7-RVMH-G6Q4 `openssl` `X509VerifyParamRef::set_host` buffer over-read
When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...
RUSTSEC-2023-0044 `openssl` `X509VerifyParamRef::set_host` buffer over-read
When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...
`openssl` `X509VerifyParamRef::set_host` buffer over-read
When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...
